Static task
static1
Behavioral task
behavioral1
Sample
cb1ec479ff2ada51359a7ca435d9eacb8009458821e4d7b932c9788ba973bed0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb1ec479ff2ada51359a7ca435d9eacb8009458821e4d7b932c9788ba973bed0.exe
Resource
win10v2004-20220812-en
General
-
Target
cb1ec479ff2ada51359a7ca435d9eacb8009458821e4d7b932c9788ba973bed0
-
Size
388KB
-
MD5
8a33d535804bd5d126be55f4df1bc5e5
-
SHA1
bfd0ace7fa23ed8269fe7f8b0b306a9cdb09c3f3
-
SHA256
cb1ec479ff2ada51359a7ca435d9eacb8009458821e4d7b932c9788ba973bed0
-
SHA512
47b7770ed137b295b169542c9ada715d53e99e4dabaf355c25a856319e476f108e789ed5360478579f1d5330f37c8e85c5566eab1565b6b7cb15dd016764f53f
-
SSDEEP
6144:/quiFSPRhSpavek86fyyaySUpatiLapadHCseYnisuCyK2:/8EPRlBPfytUpa8/etq
Malware Config
Signatures
Files
-
cb1ec479ff2ada51359a7ca435d9eacb8009458821e4d7b932c9788ba973bed0.exe windows x86
3335c8cd0470d7e16d37ee6c94332e80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
closesocket
getsockopt
ord1113
ntohs
getpeername
ord1106
getprotobyname
getservbyname
shutdown
getsockname
WSASetLastError
WSAAsyncGetProtoByNumber
WSASetBlockingHook
ord1107
WSAUnhookBlockingHook
WEP
WSACancelAsyncRequest
ord1114
ord1118
inet_addr
ord1116
recv
WSACleanup
shell32
ExtractIconExA
SHLoadInProc
DoEnvironmentSubstW
ExtractIconEx
SHGetSpecialFolderPathA
DragQueryFileW
DragQueryFileA
SHEmptyRecycleBinW
DragQueryFile
SHGetNewLinkInfo
SHGetPathFromIDListA
ExtractIconA
FindExecutableA
SheChangeDirExW
ShellExecuteEx
RealShellExecuteA
user32
CreateWindowExA
FillRect
SetThreadDesktop
TranslateMDISysAccel
GetDlgItem
GetSubMenu
GetWindowTextLengthW
MoveWindow
RealGetWindowClass
GetKeyboardType
ChangeMenuW
CascadeWindows
CharUpperA
IsCharAlphaA
WinHelpA
FrameRect
SystemParametersInfoA
DispatchMessageW
EndTask
IsWindowUnicode
DrawIconEx
OpenClipboard
TabbedTextOutW
MessageBoxIndirectW
CopyRect
SetWindowsHookExA
GetClipboardData
LoadBitmapA
RegisterWindowMessageW
CallMsgFilterW
IsCharAlphaW
MonitorFromPoint
SetFocus
GetCursorPos
SetDlgItemTextA
MsgWaitForMultipleObjectsEx
SetCaretPos
InvertRect
SendMessageW
CharToOemW
SetRect
GetMonitorInfoA
GetClassLongW
DdeConnect
BeginDeferWindowPos
SetActiveWindow
TileWindows
OpenWindowStationA
ChangeDisplaySettingsExA
SetClassWord
LookupIconIdFromDirectory
CheckDlgButton
GetDlgItemTextW
LoadCursorA
MapWindowPoints
CreateWindowStationA
LoadStringW
IsClipboardFormatAvailable
SendMessageA
AppendMenuA
DlgDirSelectExW
AttachThreadInput
DdeSetQualityOfService
wsprintfA
GetComboBoxInfo
AppendMenuW
WinHelpW
InternalGetWindowText
GetLastActivePopup
OpenDesktopW
OemToCharA
ChangeDisplaySettingsW
LoadCursorW
UnloadKeyboardLayout
CreateWindowExW
ScrollDC
NotifyWinEvent
SetMenuContextHelpId
GetWindow
OpenInputDesktop
wvsprintfW
OpenDesktopA
MessageBoxW
SetKeyboardState
ReleaseCapture
IsCharAlphaNumericA
DefWindowProcA
ChangeClipboardChain
LoadKeyboardLayoutW
SwitchDesktop
ExcludeUpdateRgn
DdeFreeDataHandle
SendInput
CharLowerBuffA
LoadMenuIndirectA
DdeUninitialize
GetWindowRgn
CountClipboardFormats
GetUserObjectInformationW
GetClipboardOwner
ValidateRgn
TrackPopupMenuEx
GetMenuContextHelpId
SetSysColors
LoadCursorFromFileW
DrawTextW
IsDlgButtonChecked
TranslateAccelerator
EndDeferWindowPos
GetTitleBarInfo
InsertMenuW
PostThreadMessageA
SwitchToThisWindow
PeekMessageW
comdlg32
ReplaceTextA
GetOpenFileNameA
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
MapViewOfFileEx
GetConsoleTitleA
GetFileType
GetQueuedCompletionStatus
GetExitCodeProcess
GetMailslotInfo
GlobalFindAtomW
lstrcmpi
GetLongPathNameA
ExpandEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableA
CreateSemaphoreA
PeekConsoleInputW
GetComputerNameW
FindFirstFileExW
CreateFileA
OpenProcess
GetFileAttributesExW
GetThreadTimes
WriteConsoleOutputAttribute
OpenSemaphoreW
TerminateThread
SetCurrentDirectoryA
GlobalReAlloc
GlobalFlags
GlobalUnfix
AddAtomW
WinExec
MoveFileExW
GetComputerNameA
CreateConsoleScreenBuffer
WriteProfileSectionW
WriteFileGather
OpenMutexW
SetEndOfFile
GetVersion
Heap32First
SetLocalTime
GetNumberOfConsoleMouseButtons
SetThreadPriorityBoost
EnumResourceNamesW
Heap32ListNext
Thread32Next
VirtualLock
FreeResource
lstrcpynA
CreateEventW
SearchPathW
ReadProcessMemory
GetProfileStringA
GetProcAddress
EnterCriticalSection
EnumCalendarInfoExA
GetConsoleTitleW
CreatePipe
FindResourceExW
WriteProfileSectionA
FormatMessageW
SetConsoleOutputCP
EnumResourceLanguagesW
ConnectNamedPipe
SetFilePointer
GetConsoleOutputCP
EnumSystemLocalesA
SetConsoleWindowInfo
WritePrivateProfileSectionW
FindFirstFileW
LoadLibraryW
GetExitCodeThread
lstrcpynW
CopyFileExA
PeekNamedPipe
GetFileAttributesExA
TryEnterCriticalSection
OpenFileMappingA
FindNextFileA
FileTimeToSystemTime
LoadModule
GetPrivateProfileSectionW
ReadConsoleOutputCharacterW
ReadConsoleInputW
FindAtomW
GetThreadLocale
SetConsoleMode
GetFileSize
GetLocalTime
Heap32Next
GetDateFormatA
GetLocaleInfoW
GetVolumeInformationA
HeapLock
VirtualQueryEx
LeaveCriticalSection
WaitForSingleObject
ReadFile
WriteConsoleInputA
GetLongPathNameW
LockResource
GetFileAttributesW
WaitForDebugEvent
InitAtomTable
InitializeCriticalSectionAndSpinCount
LoadResource
FlushInstructionCache
CompareFileTime
GetCompressedFileSizeA
LocalHandle
lstrcmpW
GetModuleFileNameW
lstrlenA
CreateFileMappingW
GetPrivateProfileStringA
RtlFillMemory
TlsGetValue
GetLocaleInfoA
CreateToolhelp32Snapshot
GetProcessHeap
GetCurrentDirectoryW
GlobalMemoryStatus
SetConsoleScreenBufferSize
EnumResourceTypesW
DeleteFiber
GlobalUnlock
LocalSize
GetThreadPriority
TlsSetValue
WriteConsoleOutputA
GetPrivateProfileSectionNamesA
CreateRemoteThread
GetModuleHandleW
GetVolumeInformationW
WriteProfileStringA
LocalFree
GetStringTypeExA
LockFileEx
GetStringTypeW
FillConsoleOutputCharacterA
SetConsoleTitleA
lstrlenW
AddAtomA
LocalUnlock
Module32Next
EnumCalendarInfoW
GetProcessAffinityMask
GetDriveTypeW
EnumResourceNamesA
ReleaseMutex
WritePrivateProfileStringA
SetThreadContext
EnumSystemCodePagesA
HeapCompact
DisconnectNamedPipe
SetThreadPriority
WriteConsoleOutputCharacterW
SetVolumeLabelW
GetCommandLineA
GetTimeFormatA
SetConsoleCursorPosition
GetCompressedFileSizeW
FindAtomA
GetPrivateProfileSectionA
UpdateResourceA
MulDiv
GetWindowsDirectoryA
OpenEventW
SetSystemTimeAdjustment
FreeLibrary
GetTempFileNameA
FreeLibraryAndExitThread
Sleep
GetThreadSelectorEntry
InterlockedExchangeAdd
OpenEventA
CommConfigDialogA
GetFileTime
CreateSemaphoreW
WaitForMultipleObjects
GlobalGetAtomNameW
GetNamedPipeInfo
OpenMutexA
GetEnvironmentStringsW
GetPriorityClass
DeleteAtom
VirtualFreeEx
CreateThread
SetWaitableTimer
ResetEvent
UnhandledExceptionFilter
HeapUnlock
WideCharToMultiByte
IsDebuggerPresent
GetWriteWatch
SetHandleCount
LoadLibraryExW
GetSystemInfo
DuplicateHandle
FlushFileBuffers
FreeEnvironmentStringsW
GetPrivateProfileStructA
GetDiskFreeSpaceExA
GetProfileSectionA
FileTimeToLocalFileTime
FindResourceA
TlsAlloc
OpenWaitableTimerA
CreateDirectoryExW
SetTimeZoneInformation
GetEnvironmentVariableA
SetLastError
InterlockedIncrement
GetProfileSectionW
GetHandleInformation
GetShortPathNameW
CreateTapePartition
MoveFileW
GlobalDeleteAtom
WriteConsoleOutputW
GetTimeFormatW
GetConsoleMode
EraseTape
SetEnvironmentVariableW
GlobalWire
TlsFree
SetFileAttributesW
GetCalendarInfoA
GetLastError
CreateMailslotW
FindFirstFileA
EnumTimeFormatsW
GetConsoleCursorInfo
HeapWalk
FindClose
SetLocaleInfoW
FreeConsole
FoldStringW
SystemTimeToTzSpecificLocalTime
FindResourceExA
SetConsoleCP
HeapSize
WriteProcessMemory
WriteFile
PeekConsoleInputA
WriteFileEx
GetCurrentDirectoryA
WaitForMultipleObjectsEx
EnumCalendarInfoA
VirtualProtectEx
FindFirstFileExA
lstrcatW
FlushViewOfFile
WriteProfileStringW
lstrcmpiA
ExitThread
EnumDateFormatsA
GetSystemDirectoryW
GetWindowsDirectoryW
HeapValidate
GetProcessHeaps
GetCurrencyFormatW
GetTempPathW
PulseEvent
GlobalAddAtomA
GlobalFix
GetSystemTime
GetPrivateProfileSectionNamesW
GetProcessVersion
SuspendThread
GetSystemTimeAdjustment
GetSystemDirectoryA
FindCloseChangeNotification
Thread32First
LocalCompact
LocalFlags
lstrlen
GetUserDefaultLCID
GetAtomNameA
SleepEx
CreateFileW
WriteConsoleOutputCharacterA
lstrcmp
SetThreadAffinityMask
SetComputerNameA
FindFirstChangeNotificationW
GetConsoleScreenBufferInfo
GetLogicalDrives
GetStringTypeExW
EnumSystemLocalesW
GetFullPathNameW
SetPriorityClass
TransmitCommChar
GlobalHandle
SetCriticalSectionSpinCount
GetConsoleCP
Heap32ListFirst
SetThreadLocale
EnumTimeFormatsA
GetACP
GetThreadPriorityBoost
GlobalCompact
GetSystemDefaultLangID
GetTempPathA
SetFileAttributesA
GetCurrentThread
DosDateTimeToFileTime
ReadConsoleW
GetShortPathNameA
WaitNamedPipeA
CreateWaitableTimerA
OpenWaitableTimerW
RemoveDirectoryW
GetFileAttributesA
GetCalendarInfoW
GlobalLock
DeviceIoControl
LoadLibraryExA
CreateMutexW
OutputDebugStringW
ReadConsoleA
WaitForSingleObjectEx
EnumDateFormatsExW
InterlockedCompareExchange
EnumDateFormatsW
CreateProcessA
CommConfigDialogW
SetEvent
FormatMessageA
GetStartupInfoA
GetDiskFreeSpaceW
GetProfileIntW
WritePrivateProfileSectionA
GetCurrencyFormatA
GetLargestConsoleWindowSize
VirtualFree
wininet
FtpCommandA
FtpFindFirstFileW
HttpOpenRequestA
HttpSendRequestExA
InternetGetConnectedStateExW
SetUrlCacheEntryInfoW
ShowSecurityInfo
FtpFindFirstFileA
DeleteUrlCacheEntryA
InternetUnlockRequestFile
SetUrlCacheGroupAttributeA
DeleteIE3Cache
UpdateUrlCacheContentPath
InternetGetCertByURL
IsUrlCacheEntryExpiredA
InternetReadFileExA
InternetErrorDlg
FindFirstUrlCacheGroup
DeleteUrlCacheContainerW
GetUrlCacheEntryInfoW
GetUrlCacheGroupAttributeA
RegisterUrlCacheNotification
GopherGetAttributeW
InternetGetCookieA
LoadUrlCacheContent
InternetCanonicalizeUrlW
InternetGetConnectedState
InternetShowSecurityInfoByURLW
FtpRenameFileW
FtpGetFileA
InternetShowSecurityInfoByURLA
InternetTimeFromSystemTime
GopherGetLocatorTypeW
SetUrlCacheEntryGroupW
InternetSetOptionW
IsUrlCacheEntryExpiredW
CommitUrlCacheEntryA
SetUrlCacheConfigInfoA
UnlockUrlCacheEntryFileW
InternetGoOnlineW
HttpSendRequestExW
InternetReadFile
GopherOpenFileA
InternetConnectA
FindFirstUrlCacheEntryA
InternetCombineUrlA
InternetLockRequestFile
FindNextUrlCacheContainerW
InternetAutodialHangup
ShowX509EncodedCertificate
InternetQueryOptionW
InternetAlgIdToStringW
DeleteUrlCacheEntryW
FindNextUrlCacheContainerA
GetUrlCacheConfigInfoA
HttpAddRequestHeadersA
InternetConnectW
DetectAutoProxyUrl
InternetCreateUrlW
FtpCreateDirectoryW
HttpEndRequestA
InternetTimeFromSystemTimeA
InternetDial
FreeUrlCacheSpaceW
GetUrlCacheEntryInfoExW
InternetSetOptionExW
GetUrlCacheConfigInfoW
FtpCreateDirectoryA
CommitUrlCacheEntryW
HttpOpenRequestW
InternetAutodial
advapi32
LookupSecurityDescriptorPartsA
RegEnumKeyExA
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE